Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa
File:                     3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa (raw, json)
Hash identifier:          sl/K9iug0TxHpSiUSgafwkZCT1bhz8c/+zKcOjCgfQk=
Subject key identifier:   90:E5:A2:36:7B:DD:27:39:5A:D2:98:AA:0A:1F:FE:0D:A1:53:D0:28
Certificate issuer:       /CN=9E721E07319A410019FB80D329A97A4EFA382605
Certificate serial:       42E6B8E560422C78C024E4983CDB17A1A8A95E18
Authority key identifier: 9E:72:1E:07:31:9A:41:00:19:FB:80:D3:29:A9:7A:4E:FA:38:26:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E721E07319A410019FB80D329A97A4EFA382605.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa
Signing time:             Wed 25 Jun 2025 22:56:29 +0000
ROA not before:           Wed 25 Jun 2025 22:51:29 +0000
ROA not after:            Wed 24 Jun 2026 22:56:29 +0000
asID:                     61774
IP address blocks:        200.225.136.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e6:b8:e5:60:42:2c:78:c0:24:e4:98:3c:db:17:a1:a8:a9:5e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E721E07319A410019FB80D329A97A4EFA382605
        Validity
            Not Before: Jun 25 22:51:29 2025 GMT
            Not After : Jun 24 22:56:29 2026 GMT
        Subject: CN=90E5A2367BDD27395AD298AA0A1FFE0DA153D028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:10:50:ee:74:e9:55:49:21:4d:95:3e:2f:
                    94:8f:5d:f5:e7:fd:62:2c:e6:03:03:d6:d1:c7:9f:
                    14:24:1a:b1:34:54:82:9a:be:8b:61:99:41:81:1f:
                    31:bf:e5:3b:3f:00:9b:70:0f:8e:60:e3:26:de:9c:
                    87:5c:9b:3b:1f:ff:9e:ec:1c:e0:33:a7:d2:e6:8b:
                    24:6c:2f:c8:bf:f2:50:72:c2:08:08:17:18:3f:ba:
                    33:c5:76:07:37:aa:27:eb:d1:50:bd:74:8c:73:5d:
                    39:d9:c3:b2:8c:88:2d:dc:20:a1:fd:c0:3f:1b:c2:
                    33:0f:12:7f:0a:1c:13:c2:c0:20:ea:24:76:3b:fe:
                    b6:71:b8:2f:a0:b6:0e:ac:0a:b0:3f:bf:2c:b1:c8:
                    ad:c3:fe:c5:fe:19:19:7f:a1:3d:c8:ef:9f:56:54:
                    0f:f6:03:9e:0c:4c:d1:c2:c3:ba:76:c9:ed:aa:78:
                    35:cf:1b:9d:7b:0f:9e:1e:0b:6e:7c:ce:8e:27:dc:
                    3e:cf:79:db:76:a9:3d:ae:7e:c0:96:12:1d:8a:9f:
                    d4:4e:41:12:af:a4:82:0f:12:bb:59:c7:35:e7:3e:
                    98:0f:52:84:05:d3:8f:df:1d:49:ab:4c:23:71:43:
                    3e:57:9c:a2:e7:d0:07:ca:b2:7e:59:9f:63:bb:df:
                    d4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E5:A2:36:7B:DD:27:39:5A:D2:98:AA:0A:1F:FE:0D:A1:53:D0:28
            X509v3 Authority Key Identifier:
                keyid:9E:72:1E:07:31:9A:41:00:19:FB:80:D3:29:A9:7A:4E:FA:38:26:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/9E721E07319A410019FB80D329A97A4EFA382605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E721E07319A410019FB80D329A97A4EFA382605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:22:ce:88:e2:8b:50:09:65:67:1f:d3:e7:10:48:f4:46:ba:
         ea:9f:63:e0:4f:e2:a5:fa:a7:7e:61:81:29:23:db:a6:09:62:
         93:e6:b7:0d:e6:ff:ff:d4:5d:12:81:80:e0:cd:37:35:8b:a8:
         70:ee:81:de:99:d0:57:dc:74:3b:b8:c9:b2:af:25:25:b6:a3:
         71:b4:bf:fa:f6:97:45:c3:83:b0:6d:ff:4f:7f:69:04:1e:86:
         5f:f4:3e:d9:45:59:4b:b9:e1:94:8a:7f:ca:b4:b2:a4:1f:95:
         69:cd:3f:17:68:5a:cd:b6:bb:6c:79:ad:9b:1a:89:28:9f:78:
         fd:5b:e4:69:94:7f:5d:b4:97:b7:bb:f1:47:fb:5a:b5:9d:5a:
         a1:06:b8:87:10:d2:28:12:91:dc:9d:99:6e:1b:48:95:70:b3:
         55:21:80:06:81:bd:87:50:66:fe:c8:f6:6d:95:1f:1c:59:ca:
         ed:db:64:60:54:65:3e:50:98:16:76:90:db:6e:ea:8e:34:28:
         1f:7d:6d:25:c2:68:d7:13:84:87:e5:a0:27:21:dc:7f:da:57:
         fd:71:0d:d6:a8:09:8d:14:3d:cf:fc:17:2c:7b:95:9d:54:59:
         cc:28:35:a0:2d:63:94:3b:b2:e4:ad:2e:09:38:c6:e9:53:9d:
         4b:95:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 01:01:14 2025 by rpki-client